Key inventory
Every signing key held by this instance. Secret keys never leave the signer. Only the public key and its fingerprint are published, which is all a verifier needs to check an envelope.
6
Total keys
Issued across all signer identities
3
Active keys
ML-DSA-87, security category 5
3
Legacy keys
ML-DSA-65, retained for existing envelopes
0
Classical keys
No RSA or ECDSA key is permitted to sign
Signing keys
| Key id | Owner | Algorithm | Fingerprint | Public key | Envelopes | Created | Status |
|---|---|---|---|---|---|---|---|
| key-cfd1b178ac6f | legal@firstnationalbank.com | ML-DSA-87 | ccae:01fd:28da:3558:8346… | 2592 B | 2 | 13 Jul 2026 06:32 UTC | Active |
| key-3f1678cc8e1f | compliance@firstnationalbank.com | ML-DSA-87 | 2a63:66e6:ff45:744b:981f… | 2592 B | 3 | 13 Jul 2026 06:32 UTC | Active |
| key-1782d28ec331 | ciso@firstnationalbank.com | ML-DSA-87 | fbf1:3b41:f827:f797:585c… | 2592 B | 2 | 13 Jul 2026 06:32 UTC | Active |
| key-de7f650e62d1 | legal@firstnationalbank.com | ML-DSA-65 | a050:d011:22ac:b08a:8818… | 1952 B | 1 | 30 Oct 2025 06:32 UTC | Legacy |
| key-a366edd85565 | compliance@firstnationalbank.com | ML-DSA-65 | d78a:c2c7:28ad:22b2:a2c4… | 1952 B | 1 | 30 Oct 2025 06:32 UTC | Legacy |
| key-b884dd152726 | ciso@firstnationalbank.com | ML-DSA-65 | f224:c2ea:3cfd:d2b6:ad16… | 1952 B | 1 | 30 Oct 2025 06:32 UTC | Legacy |
Parameter sets
ML-DSA-87
Highest assurance lattice parameter set. Default for all new signing keys.
Public key2592 bytes
Secret key4896 bytes
Signature4627 bytes
ML-DSA-65
Legacy parameter set retained for envelopes signed before the fleet moved to category 5.
Public key1952 bytes
Secret key4032 bytes
Signature3309 bytes